Re: (RADIATOR) Handler Problem.
Hello Sergio - On Tue, 19 Sep 2000, Sergio Gonzalez wrote: > *This message was transferred with a trial version of CommuniGate(tm) Pro* > Hi folks. > > I have a little problem and I wonder some can help me. > > I have here Radiator 2.14 with mSQL database to authenticate dial-up > users. > Now I want to make roaming with another ISP, so I added the handler for > this into my radius config. This is what I have now > > > Trace 4 > DbDir /usr/local/etc/raddb/db > LogDir /usr/local/etc/raddb/log > LogFile /usr/local/etc/raddb/log/Radiator.log > DictionaryFile /usr/local/etc/dictionary.usr > SnmpgetProg /usr/local/bin/snmpget > > > > Secret > NasType TotalControlSNMP > SNMPCommunity public > > > >Identifier SDB1 >DBSource dbi:mSQL:radius >DBUsername >DBAuth > > > > RewriteUsername s/^([^@]+).*/$1/ > > Host aaa.bbb.ccc.ddd > Secret > RetryTimeout 20 > > AcctLogFileName %L/another_isp.acct > > > > > > DBSource dbi:mSQL:noauth > DBUsername x > DBAuth yy > AccountingStopsOnly > AccountingTableACCOUNTING > AcctColumnDef CALLINGSTID,Calling-Station-Id,string > AcctColumnDef CALLEDSTID,Called-Station-Id,string > AcctColumnDef ACCTTERMCAUSE,Acct-Terminate-Cause,intege > AcctColumnDef CONNTERMCAUSE,Connect-Term-Reason,integer > AcctColumnDef FAILCONNREASON,Failure-to-Connect-Reason,integer > AcctColumnDef DISCONNREASON,Disconnect-Reason,integer > AcctColumnDef CONNECTSPEED,Connect-Speed,integer > AcctColumnDef SERVICETYPE,Service-Type,integer > AcctColumnDef MODULATYPE,Modulation-Type,integer > > > > > > SessionDatabase SDB1 > > DefaultSimultaneousUse 1 > DBSource dbi:mSQL:radius > DBUsername xx > DBAuth yyy > AuthSelect select PASSWORD,CHECKATTR,REPLYATTR \ > from SUBSCRIBERS where USERNAME = '%n' and STATUS=1 > > AccountingStopsOnly > AccountingTableACCOUNTING > AcctColumnDef USERNAME,User-Name > AcctColumnDef TIME_STAMP,Timestamp,integer > AcctColumnDef ACCTSESSIONID,Acct-Session-Id > AcctColumnDef ACCTSESSIONTIME,Acct-Session-Time,integer > AcctColumnDef ACCTTERMINATECAUSE,Acct-Terminate-Cause,integer > AcctColumnDef ACCTCONNECTSPEED,Connect-Speed,integer > AcctColumnDef ACCTCALLINGSTATIONID,Calling-Station-Id,string > AcctColumnDef ACCTCALLEDSTATIONID,Called-Station-Id,string > > AcctLogFileName %L/%c > PasswordLogFileName %L/password.log > > > > > Both the my users and the users from another_isp.com can authenticate, > but my own users can't connect the usual way, so they had to use the > terminal window before dialing (in win 9x), to get connected. Why is > this happening? > I will need to see a trace 4 debug showing what is happening. thanks Hugh -- Radiator: the most portable, flexible and configurable RADIUS server anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, Platypus, Freeside, Interbiller, TACACS+, PAM, external, etc, etc. Available on Unix, Linux, FreeBSD, Windows 95/98/2000, NT, MacOS X. === Archive at http://www.starport.net/~radiator/ Announcements on [EMAIL PROTECTED] To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message.
Re: (RADIATOR) Handler Problem
On May 12, 4:41am, Dialup USA Sales Dept wrote:
> Subject: (RADIATOR) Handler Problem
>
> I can't seem to get this handler to work correctly. Here is the output of
> my log file. You will see that even though a user isn't dialing into one of
> the numbers that is specified in the "Called-Station-Id" attribute he is
> being authenticated by this Handler any ideas?
Its the leading and trailing | in the regexp. The | separates optinal straings,
and your regexp says thqat the empty string is a permitted option. And that
will match every possible string. So you need:
(Note its been wrapped by my mailer.)
There is no | at the beginning or the end, only _between_ the options.
Hope that helps.
Cheers.
>
> Help
> Brandon
>
> Attached is my current radius.cfg file.
>
> *** Received from 206.15.168.72 port 47149
> Code: Access-Request
> Identifier: 11
> Authentic: <3>1<243>"<252>.<249>s<8><163>Hk<21>{<227>v
> Attributes:
> User-Name = "usa1001@usa"
> User-Password = "J]<196>0<31>oXz"<232>ERt<139><8"
> NAS-IP-Address = 209.206.34.54
> NAS-Port = 39
> Service-Type = Framed-User
> Framed-Protocol = PPP
> Framed-IP-Address = 209.206.33.16
> Called-Station-Id = "2068128787"
> Calling-Station-Id = "2063671148"
> NAS-Port-Type = Async
> Annex-Transmit-Speed = 4
> Connect-Info = "4 24000 V.90"
> Signature = "<21>n<233>u<21><15><137>$<188>3<145>e<170><217><238>V"
> Annex-Receive-Speed = 24000
>
> Wed May 12 07:22:18 1999: DEBUG: Check if Handler
> User-Name=/\@dual/,Framed-IP-A
> ddress=/^206\.15\.|^208\.196\.|^209\.206\./ should be used to handle this
> reques
> t
> Wed May 12 07:22:18 1999: DEBUG: Check if Handler
> User-Name=/\@safeusa|\@kidscon
> nect/,Framed-IP-Address=/^206\.15\.|^208\.196\.|^209\.206\./ should be used
> to h
> andle this request
> Wed May 12 07:22:18 1999: DEBUG: Check if Handler Called-Station-Id =
> /|2020|885
> 9810|9759810|9499810|8739810|9449810|9259810|9209810|2378018|2368018|2252255
> |250
> 2255|3252255|3082255|9268063|9268064|9268018|9498019|3429810|4919810|2959810
> |478
> 2255|9680468|7550755|3640364|7780778|2960296|3480348|/ should be used to
> handle
> this request
> Wed May 12 07:22:18 1999: DEBUG: Handling request with Handler
> 'Called-Station-I
> d =
> /|2020|8859810|9759810|9499810|8739810|9449810|9259810|9209810|2378018|23680
> 18|2252255|2502255|3252255|3082255|9268063|9268064|9268018|9498019|3429810|4
> 9198
> 10|2959810|4782255|9680468|7550755|3640364|7780778|2960296|3480348|/'
> Wed May 12 07:22:18 1999: DEBUG: Handling with Radius::AuthUNIX
> Wed May 12 07:22:18 1999: DEBUG: Radius::AuthUNIX looks for match with
> usa1001@u
> sa
> Wed May 12 07:22:18 1999: DEBUG: Radius::AuthUNIX ACCEPT:
> Wed May 12 07:22:18 1999: DEBUG: Access accepted for usa1001@usa
> Wed May 12 07:22:18 1999: DEBUG: Packet dump:
> *** Sending to 206.15.168.72 port 47149
> Code: Access-Accept
> Identifier: 11
> Authentic: <3>1<243>"<252>.<249>s<8><163>Hk<21>{<227>v
> Attributes:
> Service-Type = Framed-User
> Framed-Protocol = PPP
> Framed-IP-Address = 255.255.255.254
> Framed-IP-Netmask = 255.255.255.255
> Idle-Timeout = 900
> Session-Timeout = 28800
>
> [ Attachment (application/octet-stream): "radius.cfg" 4313 bytes
> Encoded with "quoted-printable" ]
>-- End of excerpt from Dialup USA Sales Dept
--
Mike McCauley [EMAIL PROTECTED]
Open System Consultants Pty. LtdUnix, Perl, Motif, C++, WWW
24 Bateman St Hampton, VIC 3188 Australia http://www.open.com.au
Phone +61 3 9598-0985 Fax +61 3 9598-0955
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald,
Platypus, Freeside, TACACS+, PAM, external, etc etc on Unix, Win95/8,
NT, Rhapsody
===
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.
